4.4 Enabling LDAP and Active Directory Authentication

Oracle VM Manager is an application that runs on Oracle WebLogic Server. For this reason, Oracle VM Manager supports any authentication providers that Oracle WebLogic Server supports.

To configure Oracle VM Manager to authenticate against an LDAP or Active Directory service, you must add the directory service as an authentication provider in Oracle WebLogic Server, as follows:

Note

The Oracle VM Manager upgrade process does not save and restore any configurations you create for external authentication providers. If you enable LDAP or Active Directory authentication and then upgrade Oracle VM Manager, you must complete the following steps after the upgrade to re-enable authentication.

Open the Oracle WebLogic Server Administration Console at:
https://hostname:7002/console
Where hostname is the Oracle VM Manager hostname or IP address.
Log in as the weblogic user.
Click Lock & Edit to modify the domain.
From the Domain Structure pane, select Security Realms, and then select myrealm.
The settings page for the security realm displays.
Select the Providers tab and locate the Authentication Providers table.
Click New to create an authentication provider.
Specify a name for the authentication provider, select LDAPAuthenticator as the type of authentication provider, and then click OK.
The new authentication provider displays in the Authentication Providers table.
Change the authentication sequence so that the LDAP authentication provider takes priority over other authentication providers.
1. Click Reorder from the Authentication Providers table.
2. Move the LDAP authentication provider to the top of the list and then click OK.
Select the LDAP authentication provider you created from the Authentication Providers table.
The settings page displays.
On the Common tab, select SUFFICIENT as the value for Control Flag and then click Save.
Select the Provider Specific tab, configure the authentication provider as appropriate, and then click Save.
Click Activate Changes to apply your changes.
Restart the Oracle VM Manager service as root:
```
# service ovmm restart
```

Verify that the LDAP authenticator is configured and that the LDAP users and groups are populated in Oracle WebLogic Server, as follows:

Log in to the Oracle WebLogic Server Administration Console.
From the Domain Structure pane, select Security Realms, and then select myrealm.
Select the Users and Groups tab.
Verify that the LDAP users and groups are populated as appropriate.